Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32332d3233203d3e20323633363431.roa
File:                     3137392e3132372e3135322e302f32332d3233203d3e20323633363431.roa (raw, json)
Hash identifier:          LWqba0Eh7t0yQ4oYm8Z5DVLEkZuNhyaZavprXDL7uBA=
Subject key identifier:   53:E5:CC:FC:16:34:0F:6B:5A:D2:C9:73:2D:C9:BD:68:55:81:AD:C8
Certificate issuer:       /CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
Certificate serial:       364FE270864BA7B7E304AED0A83EE14DD37C6E2B
Authority key identifier: 32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32332d3233203d3e20323633363431.roa
Signing time:             Tue 19 May 2026 12:38:13 +0000
ROA not before:           Tue 19 May 2026 12:33:13 +0000
ROA not after:            Tue 18 May 2027 12:38:13 +0000
asID:                     263641
IP address blocks:        179.127.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl
                          rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 May 2026 23:59:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:4f:e2:70:86:4b:a7:b7:e3:04:ae:d0:a8:3e:e1:4d:d3:7c:6e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6
        Validity
            Not Before: May 19 12:33:13 2026 GMT
            Not After : May 18 12:38:13 2027 GMT
        Subject: CN=53E5CCFC16340F6B5AD2C9732DC9BD685581ADC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a7:0c:3e:19:34:63:29:be:ee:49:ea:f7:51:
                    41:22:1b:b4:e0:1b:35:ea:2a:cb:29:e3:e3:49:8f:
                    1d:a1:6f:b1:ca:27:80:33:11:28:da:26:e1:f1:3b:
                    56:7f:95:3e:30:47:a1:7c:c4:41:3d:32:04:3f:0d:
                    1c:51:71:da:4a:7b:ff:cc:c7:cf:a5:49:22:de:80:
                    42:91:b5:0a:b4:02:a6:c5:19:f7:e7:f3:0c:78:06:
                    04:b1:d2:53:a0:16:97:19:a5:ca:3c:f1:07:38:f1:
                    06:cb:32:f3:3a:88:ac:f4:ae:56:72:fa:ef:2e:9f:
                    5b:5c:0c:c2:ba:83:2d:dd:58:2a:03:8a:e2:23:a3:
                    9c:d5:00:cf:90:c4:bd:02:2f:85:31:63:96:9d:1f:
                    aa:26:ac:e8:9f:4b:93:f4:d2:df:67:90:dd:4d:ff:
                    8d:95:8d:75:59:ee:26:a4:e8:11:49:83:ae:7a:bb:
                    e9:1f:51:b1:8a:c9:77:37:31:4e:50:66:62:04:a7:
                    a0:b6:d9:cb:09:3f:94:6f:60:53:f4:f2:62:f3:fe:
                    0f:f1:9d:31:15:35:ce:4a:bc:c0:a5:25:f0:aa:12:
                    ce:dc:80:23:01:06:22:8e:53:a9:48:64:4c:39:0b:
                    f9:fb:30:bd:b5:d4:7f:b8:f6:19:78:e8:be:3c:d6:
                    b7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E5:CC:FC:16:34:0F:6B:5A:D2:C9:73:2D:C9:BD:68:55:81:AD:C8
            X509v3 Authority Key Identifier:
                keyid:32:8E:78:0D:CF:E7:B9:F0:AB:5A:87:72:9D:44:CC:AD:3D:73:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/328E780DCFE7B9F0AB5A87729D44CCAD3D73B3A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/3137392e3132372e3135322e302f32332d3233203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d6:5c:13:fa:de:dd:77:6a:e7:84:0d:4c:8d:d1:e4:b9:f5:87:
         3e:a3:35:c9:ed:41:d4:c7:ef:69:21:07:50:f2:a1:28:fb:9a:
         53:11:48:49:e5:1a:23:44:2a:31:bc:d1:ce:fb:f1:a3:92:ca:
         71:8d:53:66:f9:9c:e6:0c:f8:5c:40:21:ce:2d:fe:a0:68:8c:
         7b:84:36:02:44:2c:43:f3:b4:f0:f9:3e:73:23:a1:2e:5a:7b:
         46:88:8a:38:03:f4:cb:a9:05:12:7b:ea:7f:52:b9:a1:fb:7a:
         1c:f2:65:b1:55:d1:72:ec:db:5d:12:3c:3a:99:a0:ac:65:e4:
         63:7c:1b:06:a6:9a:41:67:00:7a:e7:02:45:d2:49:8d:4b:84:
         37:65:60:8c:43:a6:46:fb:2c:4e:04:41:cc:4b:ba:e9:f9:95:
         cc:a5:3c:90:2f:c9:f9:28:35:1e:b7:d0:b2:42:e1:c7:e5:d1:
         41:39:6e:ac:2f:7f:19:89:92:69:36:16:95:b8:ea:b5:3d:9d:
         68:19:f6:d8:46:dc:28:c3:31:11:cf:47:ed:0c:27:6e:ca:4a:
         29:a3:42:10:3e:a0:87:4b:df:87:da:7c:64:4e:d9:bf:0e:01:
         dc:57:08:19:58:7a:fc:21:7c:a4:43:41:2f:37:57:3a:d7:d0:
         b6:82:2b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 14:45:35 2026 by rpki-client